A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. The highest threat from this vulnerability is to data confidentiality and integrity.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libwbclient-develUpgrade libsmbclient-develUpgrade samba-devel | May 4, 2022 | May 5, 2021 |
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | May 5, 2021 |
| Amazon Linux Ami 2 | — | Upgrade samba-develUpgrade samba-client-libsUpgrade libwbclientUpgrade samba-testUpgrade samba-test-libsUpgrade samba-common-toolsUpgrade sambaUpgrade samba-commonUpgrade libsmbclient-develUpgrade samba-pythonUpgrade ctdb-testsUpgrade samba-libsUpgrade samba-krb5-printingUpgrade samba-winbind-krb5-locatorUpgrade samba-common-libsUpgrade samba-winbindUpgrade samba-dcUpgrade libwbclient-develUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-pidlUpgrade samba-python-testUpgrade samba-winbind-modulesUpgrade samba-vfs-glusterfsUpgrade samba-debuginfoUpgrade libsmbclientUpgrade ctdbUpgrade samba-dc-libs | Jul 2, 2021 | May 5, 2021 |
| Amazon_linux | — | Upgrade samba | Feb 19, 2022 | Apr 29, 2021 |
| Centos_linux | — | Upgrade samba-dcUpgrade samba-debugsourceUpgrade samba-vfs-glusterfs-debuginfoUpgrade samba-winexe-debuginfoUpgrade samba-testUpgrade ctdb-tests-debuginfoUpgrade libwbclient-develUpgrade python3-samba-debuginfoUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-test-libsUpgrade libwbclient-debuginfoUpgrade ctdb-testsUpgrade samba-common-tools-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-python-testUpgrade samba-pidlUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-test-debuginfoUpgrade samba-krb5-printingUpgrade samba-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-client-debuginfoUpgrade samba-winexeUpgrade samba-develUpgrade python3-sambaUpgrade samba-libs-debuginfoUpgrade samba-winbindUpgrade python3-samba-testUpgrade samba-libsUpgrade samba-test-libs-debuginfoUpgrade samba-winbind-clientsUpgrade samba-winbind-clients-debuginfoUpgrade samba-common-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-vfs-glusterfsUpgrade samba-pythonUpgrade samba-commonUpgrade libsmbclient-debuginfoUpgrade libsmbclientUpgrade ctdbUpgrade libwbclientUpgrade samba-client-libs-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbind-modulesUpgrade libsmbclient-develUpgrade samba-dc-libsUpgrade samba-winbind-modules-debuginfoUpgrade ctdb-debuginfoUpgrade samba-common-toolsUpgrade samba | Jun 9, 2021 | May 5, 2021 |
| Debian | — | Upgrade samba | May 31, 2021 | May 5, 2021 |
| Freebsd | — | Upgrade samba414Upgrade samba412Upgrade samba413 | Nov 4, 2022 | May 1, 2021 |
| Gentoo Linux | — | Upgrade net-fs/samba. | May 28, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-winbindUpgrade sambaUpgrade libsmbclientUpgrade samba-pythonUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-commonUpgrade samba-libsUpgrade samba-winbind-clients | Sep 16, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-libsUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-client-libsUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade libwbclientUpgrade libsmbclientUpgrade samba-commonUpgrade samba-python | Oct 26, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-common-toolsUpgrade samba-winbindUpgrade libwbclientUpgrade samba-libsUpgrade sambaUpgrade samba-pythonUpgrade samba-commonUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade samba-winbind-clients | Sep 7, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-sambaUpgrade samba-commonUpgrade samba-test-libsUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade samba-libsUpgrade samba-clientUpgrade samba-testUpgrade libwbclientUpgrade samba-winbindUpgrade samba-krb5-printingUpgrade samba-client-libsUpgrade python2-sambaUpgrade ctdbUpgrade sambaUpgrade python3-samba-testUpgrade python2-samba-testUpgrade ctdb-testsUpgrade samba-pidlUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-dc-libsUpgrade libsmbclientUpgrade samba-winbind-clients | Aug 10, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade samba-commonUpgrade samba-winbind-clientsUpgrade libwbclientUpgrade sambaUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-clientUpgrade samba-libsUpgrade libsmbclient | Aug 10, 2021 | May 5, 2021 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.13.8-11.4.39.0.1.107.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.13.8-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | May 5, 2021 |
| Oracle_linux | — | Upgrade samba-develUpgrade samba-dcUpgrade ctdbUpgrade libsmbclientUpgrade libwbclient-develUpgrade sambaUpgrade samba-pidlUpgrade samba-pythonUpgrade ctdb-testsUpgrade samba-python-testUpgrade samba-testUpgrade libwbclientUpgrade samba-commonUpgrade samba-winbindUpgrade samba-vfs-glusterfsUpgrade samba-krb5-printingUpgrade samba-common-toolsUpgrade libsmbclient-develUpgrade samba-test-libsUpgrade samba-winexeUpgrade python3-sambaUpgrade python3-samba-testUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-client-libsUpgrade samba-dc-libs | Jun 10, 2021 | Apr 29, 2021 |
| Qnap Qts | — | Upgrade QNAP QTS to the latest version | Aug 4, 2025 | Jun 16, 2021 |
| Redhat_linux | — | Upgrade samba-winbind-clientsUpgrade samba-debugsourceUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade samba-pythonUpgrade samba-common-libsUpgrade ctdb-debuginfoUpgrade samba-vfs-glusterfsUpgrade samba-winbind-modulesUpgrade samba-client-libs-debuginfoUpgrade samba-python-testUpgrade libsmbclientUpgrade python3-samba-debuginfoUpgrade libwbclient-develUpgrade samba-common-toolsUpgrade samba-winbindUpgrade samba-test-libs-debuginfoUpgrade ctdb-testsUpgrade samba-vfs-glusterfs-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-dc-libsUpgrade samba-winexeUpgrade python3-samba-testUpgrade samba-winbind-debuginfoUpgrade ctdb-tests-debuginfoUpgrade samba-dcUpgrade samba-common-libs-debuginfoUpgrade samba-commonUpgrade samba-client-libsUpgrade libsmbclient-debuginfoUpgrade samba-debuginfoUpgrade samba-test-debuginfoNo solution existsUpgrade libsmbclient-develUpgrade samba-winexe-debuginfoUpgrade samba-libsUpgrade samba-develUpgrade libwbclientUpgrade samba-winbind-krb5-locator-debuginfoUpgrade python3-sambaUpgrade sambaUpgrade samba-winbind-clients-debuginfoUpgrade samba-client-debuginfoUpgrade samba-test-libsUpgrade samba-winbind-modules-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-testUpgrade samba-krb5-printing-debuginfoUpgrade samba-krb5-printingUpgrade samba-common-tools-debuginfoUpgrade ctdbUpgrade samba-pidl | Jun 9, 2021 | May 5, 2021 |
| Rocky_linux | — | Upgrade libsmbclientUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-winbind-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-clientsUpgrade samba-debugsourceUpgrade samba-test-libs-debuginfoUpgrade samba-winexeUpgrade samba-common-tools-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-client-debuginfoUpgrade samba-common-libsUpgrade python3-samba-testUpgrade samba-winbind-modulesUpgrade samba-test-libsUpgrade samba-develUpgrade python3-samba-debuginfoUpgrade ctdbUpgrade samba-winbind-krb5-locatorUpgrade samba-client-libsUpgrade samba-krb5-printingUpgrade libsmbclient-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-debuginfoUpgrade samba-libsUpgrade libwbclient-debuginfoUpgrade python3-sambaUpgrade samba-winexe-debuginfoUpgrade samba-common-libs-debuginfoUpgrade libsmbclient-develUpgrade samba-krb5-printing-debuginfoUpgrade libwbclientUpgrade samba-test-debuginfoUpgrade ctdb-testsUpgrade ctdb-tests-debuginfoUpgrade samba-winbindUpgrade libwbclient-develUpgrade samba-testUpgrade ctdb-debuginfoUpgrade sambaUpgrade samba-winbind-clients-debuginfo | May 5, 2022 | May 5, 2021 |
| Samba | — | Upgrade to Samba 4.14.4 or later.Upgrade to Samba 4.12.15 or later.Upgrade to Samba 4.13.8 or later. | Jun 11, 2021 | May 5, 2021 |
| Suse | — | Upgrade libsmbclient-develUpgrade samba-libsUpgrade libsmbconf0-32bitUpgrade libsamba-util-develUpgrade libsamba-policy0-python3-32bitUpgrade libtdb1Upgrade libdcerpc-samr-develUpgrade libsamba-credentials0Upgrade samba-clientUpgrade libwbclient0Upgrade libndr-standard-develUpgrade samba-libs-32bitUpgrade samba-libs-pythonUpgrade libsamba-hostconfig0Upgrade libsmbconf0Upgrade libndr-standard0Upgrade libsamba-policy-develUpgrade libsamba-errors0-32bitUpgrade samba-ad-dc-32bitUpgrade libndr0-32bitUpgrade libnetapi0-32bitUpgrade samba-develUpgrade samba-testUpgrade libldb1Upgrade libsamba-util0Upgrade libsmbclient0Upgrade libsamba-errors-develUpgrade libsamba-credentials0-32bitUpgrade libsamba-policy-python3-develUpgrade libsmbclient0-32bitUpgrade libsamdb0-32bitUpgrade libdcerpc0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libndr0Upgrade samba-client-libs-32bitUpgrade libsamdb-develUpgrade samba-client-32bitUpgrade libsamba-passdb-develUpgrade samba-krb-printingUpgrade libtevent0Upgrade ctdbUpgrade libsamba-util0-32bitUpgrade libtevent-util-develUpgrade libsmbldap2Upgrade libndr-krb5pac0-32bitUpgrade libsmbldap0-32bitUpgrade libsamba-policy0-python3Upgrade libdcerpc-samr0Upgrade libndr1Upgrade libnetapi-develUpgrade libsamba-hostconfig-develUpgrade libtevent0-32bitUpgrade libsamba-policy0Upgrade samba-ad-dc-libsUpgrade libsamdb0Upgrade samba-libs-python3Upgrade libtdb1-32bitUpgrade samba-winbind-libs-32bitUpgrade libndr1-32bitUpgrade libsmbldap-develUpgrade samba-winbind-libsUpgrade libwbclient-develUpgrade libndr-standard0-32bitUpgrade libndr-nbt0Upgrade samba-libs-python3-32bitUpgrade libdcerpc-binding0Upgrade libsamba-hostconfig0-32bitUpgrade samba-32bitUpgrade samba-winbind-32bitUpgrade libtalloc2-32bitUpgrade libsmbconf-develUpgrade ctdb-pcp-pmdaUpgrade libndr-nbt-develUpgrade libdcerpc-develUpgrade libndr-krb5pac-develUpgrade libsamba-credentials-develUpgrade samba-winbindUpgrade samba-docUpgrade sambaUpgrade samba-core-develUpgrade libndr-krb5pac0Upgrade libnetapi0Upgrade libtalloc2Upgrade libdcerpc-atsvc0Upgrade libndr-nbt0-32bitUpgrade ldapsmbUpgrade libwbclient0-32bitUpgrade samba-cephUpgrade libsamba-passdb0-32bitUpgrade libdcerpc-samr0-32bitUpgrade libsmbldap0Upgrade libdcerpc0Upgrade libndr-develUpgrade samba-client-libsUpgrade libtevent-util0-32bitUpgrade libsmbldap2-32bitUpgrade libtevent-util0Upgrade samba-gpupdateUpgrade samba-dsdb-modulesUpgrade samba-pythonUpgrade samba-ad-dcUpgrade ctdb-testsUpgrade libsamba-passdb0Upgrade libsamba-errors0Upgrade samba-python3Upgrade samba-ldb-ldapUpgrade libnetapi-devel-32bit | Apr 30, 2021 | Apr 29, 2021 |
| Ubuntu | — | Upgrade samba (Ubuntu Pro)Upgrade samba | Apr 30, 2021 | Apr 29, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub